Cybersecurity Manager

About the role

The Cybersecurity Manager is an essential leader within the Information Security team at Simmons Bank. This role oversees the Security Operations Center (SOC), which provides continuous security monitoring, incident response, security awareness and training, and manages security threats and vulnerabilities.

Responsibilities

• Security Operations
  • Develop and maintain the Security Operations Center (SOC) Program
  • Direct a team of SOC analysts, delegating tasks to support daily cybersecurity detection and response activities
  • Develop and maintain processes to enhance detection and response capabilities
  • Develop use-cases and content for security event monitoring and automated workflows
  • Monitor SOC analyst performance against defined SLAs and metrics
  • Coordinate with Red Team and external service providers to scope and execute security assessments
• Incident Response
  • Develop, implement, and test incident response plans with SOC, IT, and business units
  • Oversee the development of written SOC response playbooks
  • Manage the incident response process, serving as Incident Commander for declared cybersecurity incidents
  • Manage an insider threat program, including data loss prevention
  • Oversee SOC analysts’ response to DLP alerts and escalations
  • Serve as security liaison for Fraud and Compliance investigations
  • Serve as quality control and security liaison for legal collections
• Security Education
  • Oversee security awareness and training program, including content selection and development
  • Oversee security awareness phishing simulations and tabletop exercises
  • Provide guidance, education, and content to other departments and business units on cyber-related matters
  • Communicate capabilities of the SOC team
• Threat and Vulnerability Management
  • Lead and manage the vulnerability management process
  • Support application security scanning and vulnerability risk analysis
  • Manage threat hunting and threat intelligence programs
  • Manage program to protect digital assets from abuse and takedown process
  • Oversee the analysis of vendor vulnerability releases (e.g., Patch Tuesday)
  • Research new trends and advances in cybersecurity to stay updated on potential threats and best practices
  • Advise business and technology leadership for potential changes in security posture
  • Recommend and direct changes in automated tools supporting the monitoring and threat landscape
• Administrative
  • Develop written standards for respective areas and contribute to the overall Information Security Policy and Program
  • Respond to audit, compliance, and regulatory requests (e.g., SOX audit)
  • Participate in periodic business reviews with vendors and internal customers
  • Manage staffing, including supervision, scheduling, development, evaluation, and disciplinary actions
  • Develop and maintain an environment of growth where knowledge and performance are consistently advancing
  • Develop and mentor staff through open communication and training opportunities; build and maintain employee morale and motivation

Qualifications

• Work Experience
  • Five (5) years of experience in information security or cybersecurity
  • Three (3) years of experience supervising and leading security operations personnel
  • Banking or Financial Services experience (preferred)
  • Experience within Security Operations Center, Fusion Center, or MSP/MSSP (preferred)
  • Experience with vulnerability management process, scanning tools, risk analysis, and metrics reporting
  • Experience investigating intrusions in a cloud/hybrid environment
  • Experience with SIEM and/or log aggregation technologies, writing queries to support investigations and threat hunts
  • Experience with security tool integrations (APIs) and automating processes with scripting and SOAR (preferred)
  • Experience leading incident response activities at an appropriate level in prior roles
• Education and Certifications
  • CISSP, CISM, GCIH, GSOC, or other security-related certifications (required)
  • Multiple certifications across security disciplines (preferred)
  • Bachelor’s or Master’s degree in a related field (preferred)
• Other Qualifications
  • Ability to balance multiple responsibilities and prioritize effectively
  • Strong sense of urgency and focus on timely execution of deliverables
  • Strong operational mindset and high degree of accountability
  • Strong situational awareness and proactive, concise communicator
  • Proficient with the MITRE attack framework and common threat vectors
  • Proficient with security of Windows operating systems
  • Strong oral and written communication skills
  • Strong organizational, problem-solving, and planning skills
  • Excellent telephone and customer service skills
  • Willingness to periodically work non-standard hours and be on call